If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

I Think I'm Infected!!!!!

I think I am infected with the VBS.LoveLetter virus! Just yesterday my McAfee found a strange virus on my computer that had VBS in it and I deleted it. I have read about VBS.LoveLetter before and I know it tries to download a password stealing trojan program from a website. Just now, my McAfee notified me that a virus was found by something close to the name KZOP or something and it told me this is a known TROJAN file. I did not download anything yet today so I didn't download the infected file. My McAfee did not find anything else. I have ran a program by the name of FixLove that I found on the Norton Virus Encyclopedia but it did not find any traces of LoveLetter. Does anyone know the name of the password stealing trojan file that is downloaded by VBS.LoveLetter? The one that I found looked something like this KZOP. Also, Is there a file that is created by LoveLetter (all variants) if so, what is the name? Any help is needed. Thanks in advance!

I don't know about KZOP, but KLEZ (and all variants of it) has been making the rounds lately. KLEZ renames .exe files and nothing runs right. Despite NAI and Norton's "fixes," my experience has been to wax the hard drive and rebuild from scratch, taking care to ensure the virus .DAT files are up to date.

Wiping hard drive seems drastic to me. Loveletter and Klez are both cleanable. Try all the popular virus web sites. Search for Klez or Loveletter and it'll tell you which registry keys to clean. I think it's something like h_key local machine/microsoft/windows/current version/runonce, but im not totally sure on that one.

Make sure you have the latest virus definitions for your virus-scanner. Disconnect your computer from any network (physically: pull out any modem or network cable from your computer) and start a complete scan (not just executables!) of your computer.

If you find a virus or trojan, write down it's exact name and location.

Using another computer (yours aught to be disconnected), visit your virus-scanners vendor, and search their online virus-encyclopedia for the virus. Read everything carefully, so that you learn everything there is to know about the virus (this might give you clues as where you got it, where it is, how to prevent damage). Finally, follow the removal instructions provided on the site.

Then, repeat everything, until you stop finding virusses. Make sure you keep regularly scanning your complete harddrive - the first week, I would suggest doing so daily.

Remember, don't panic. Just take your time - as long as you don't use your computer (except for scanning and removing of course) the virus probably won't do any (more) damage. Be calm, be thorough.

I wish to express my gratitude to the people of Italy. Thank you for inventing pizza.